Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
File:                     tjLcSuU6XipZtVv1qsfBSRDBTRY.mft (raw, json)
Hash identifier:          12mkNGDcmktqICo9oU9MNoDUer5heNTKoglsOkNqpm0=
Subject key identifier:   D2:02:A8:5E:EF:BE:5D:40:6E:02:54:00:17:E1:4C:08:59:83:CE:24
Authority key identifier: B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16
Certificate issuer:       /CN=F3616D6FAF/serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
Certificate serial:       08EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
Manifest number:          08EA
Signing time:             Sun 21 Jun 2026 01:48:25 +0000
Manifest this update:     Sun 21 Jun 2026 01:48:24 +0000
Manifest next update:     Tue 23 Jun 2026 01:48:24 +0000
Files and hashes:         1: tjLcSuU6XipZtVv1qsfBSRDBTRY.crl (hash: A+uaiTai7+1xKUwTT+htmFjicRif6mOJzE/AjH7Ld40=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282 (0x8ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616D6FAF, serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
        Validity
            Not Before: Jun 21 01:48:24 2026 GMT
            Not After : Jun 23 01:48:24 2026 GMT
        Subject: CN=6a3742e9-b249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:89:f7:a2:63:1d:c8:f2:b6:34:9d:49:a0:4c:
                    f6:36:f2:00:2c:85:4c:31:f6:50:6d:55:b2:ec:49:
                    5c:ec:96:37:70:b0:84:ac:d6:5d:f7:db:cd:b3:b3:
                    74:e2:59:f5:c8:78:1f:e1:07:6c:20:52:a4:aa:df:
                    1a:bd:d6:18:82:90:7c:a8:10:1c:d7:52:23:66:b1:
                    2b:88:3b:9c:f8:e9:3b:d2:cf:fb:76:b0:e8:7e:67:
                    9a:67:05:ff:0c:85:b3:ae:ea:fe:1b:75:e8:d0:ac:
                    0b:14:10:73:ff:7e:ae:3e:2f:98:fa:aa:36:e9:f6:
                    1d:92:f1:cc:c3:7b:90:73:7e:52:ba:18:bd:9a:f9:
                    21:dc:f8:5d:1b:bb:68:47:03:5a:6b:9d:4f:fd:68:
                    b0:f8:09:f0:45:9c:59:3a:06:d0:2d:a9:a0:7d:64:
                    76:d5:3d:f3:ed:d8:75:4a:72:81:93:8e:9b:eb:88:
                    65:76:e5:c3:97:c8:a0:8e:ed:e4:35:04:ed:03:c1:
                    8c:62:d6:f6:02:f0:d0:b0:22:94:c6:27:b1:80:a3:
                    c9:be:f2:9f:21:50:fb:01:41:8a:54:4e:45:7b:88:
                    7e:68:de:5c:d2:a3:66:f0:7f:1d:0d:a8:ea:e7:2f:
                    a2:30:ff:24:29:40:d7:e0:26:54:17:33:dc:20:70:
                    a8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:02:A8:5E:EF:BE:5D:40:6E:02:54:00:17:E1:4C:08:59:83:CE:24
            X509v3 Authority Key Identifier:
                keyid:B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:34:46:cc:a7:65:70:e5:ff:45:fc:80:0a:de:41:c6:c3:d9:
         02:9f:0a:0e:56:f2:f0:98:59:33:c3:02:83:2a:05:ca:01:41:
         b7:87:b4:b5:d2:d7:7b:1d:3e:a5:d9:4d:bb:13:9c:c9:58:a6:
         e8:17:de:44:ff:5c:8d:d2:78:84:f9:08:38:e2:81:09:08:26:
         e2:77:27:1c:3a:c7:7a:77:a2:49:aa:a8:09:8f:06:fa:38:19:
         2a:af:e7:4e:10:78:34:a2:fb:f5:10:7f:e4:27:5a:ce:e6:20:
         b2:51:60:93:79:c9:19:36:0d:a0:4b:e0:80:af:5a:87:64:c2:
         7a:82:a3:60:b7:da:5b:15:6d:a1:91:33:7b:88:65:2f:e2:2f:
         87:8d:c4:cb:28:82:7c:79:50:34:f2:a5:5a:79:98:f4:2e:49:
         af:d4:04:83:f6:97:a8:e7:d0:6b:dd:ee:37:55:d4:2f:d8:43:
         04:7e:23:16:10:03:95:e4:de:70:1d:c9:27:ac:19:23:66:34:
         ee:61:af:c7:24:7d:d4:f9:34:0e:f7:20:fe:63:73:e9:5b:7d:
         af:d0:60:4f:ea:49:39:da:c3:f4:bd:36:09:83:29:73:6e:a9:
         55:72:10:58:e3:02:16:81:be:d2:c4:25:38:12:3b:ca:a1:76:
         3f:d5:0f:dc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCOowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTZENkZBRjExMC8GA1UEBRMoQjYzMkRDNEFFNTNBNUUyQTU5QjU1QkY1QUFDN0Mx
NDkxMEMxNEQxNjAeFw0yNjA2MjEwMTQ4MjRaFw0yNjA2MjMwMTQ4MjRaMBgxFjAU
BgNVBAMTDTZhMzc0MmU5LWIyNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaifeiYx3I8rY0nUmgTPY28gAshUwx9lBtVbLsSVzsljdwsISs1l33282z
s3TiWfXIeB/hB2wgUqSq3xq91hiCkHyoEBzXUiNmsSuIO5z46TvSz/t2sOh+Z5pn
Bf8MhbOu6v4bdejQrAsUEHP/fq4+L5j6qjbp9h2S8czDe5BzflK6GL2a+SHc+F0b
u2hHA1prnU/9aLD4CfBFnFk6BtAtqaB9ZHbVPfPt2HVKcoGTjpvriGV25cOXyKCO
7eQ1BO0DwYxi1vYC8NCwIpTGJ7GAo8m+8p8hUPsBQYpUTkV7iH5o3lzSo2bwfx0N
qOrnL6Iw/yQpQNfgJlQXM9wgcKjpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0gKo
Xu++XUBuAlQAF+FMCFmDziQwHwYDVR0jBBgwFoAUtjLcSuU6XipZtVv1qsfBSRDB
TRYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE2RDZGLzM3OTlFQzg0OTNBMjExRUFCOTJDMEI2QkY4QUVBMjI4L3RqTGNT
dVU2WGlwWnRWdjFxc2ZCU1JEQlRSWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3RqTGNTdVU2WGlwWnRWdjFxc2ZCU1JEQlRSWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTZENkYvMzc5OUVDODQ5M0EyMTFFQUI5MkMwQjZCRjhB
RUEyMjgvdGpMY1N1VTZYaXBadFZ2MXFzZkJTUkRCVFJZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCtNEbMp2Vw5f9F/IAK3kHGw9kCnwoO
VvLwmFkzwwKDKgXKAUG3h7S10td7HT6l2U27E5zJWKboF95E/1yN0niE+Qg44oEJ
CCbidyccOsd6d6JJqqgJjwb6OBkqr+dOEHg0ovv1EH/kJ1rO5iCyUWCTeckZNg2g
S+CAr1qHZMJ6gqNgt9pbFW2hkTN7iGUv4i+HjcTLKIJ8eVA08qVaeZj0Lkmv1ASD
9peo59Br3e43VdQv2EMEfiMWEAOV5N5wHcknrBkjZjTuYa/HJH3U+TQO9yD+Y3Pp
W32v0GBP6kk52sP0vTYJgylzbqlVchBY4wIWgb7SxCU4EjvKoXY/1Q/c
-----END CERTIFICATE-----
Generated at Sun Jun 21 23:39:58 2026 by rpki-client